Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f589231c-6b91-3d5f-a262-e74256c0e6d5.roa
File:                     f589231c-6b91-3d5f-a262-e74256c0e6d5.roa (raw, json)
Hash identifier:          FSAcdc9xR36Ac1RSZTAnipmcyX+Eto/a4VXD+lSxshk=
Subject key identifier:   61:C0:79:C4:AB:7C:BB:47:A7:D1:C0:BD:7B:BF:39:6C:CD:D8:58:96
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC37286A1ED40CBE18ADEE100
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f589231c-6b91-3d5f-a262-e74256c0e6d5.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        24.216.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:86:a1:ed:40:cb:e1:8a:de:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a87e0036-caba-4c28-a971-ad9ef44f9c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:7b:53:c2:d3:38:65:ff:0d:1a:39:0f:32:
                    87:8d:84:2a:1c:38:70:88:8c:c5:ba:3f:31:8c:91:
                    6a:8d:8d:35:26:71:c3:dd:7e:11:9b:bd:96:90:75:
                    d6:b0:b3:28:3b:25:80:59:be:2d:9c:eb:d5:bb:f1:
                    a0:ad:31:6e:09:8a:d3:aa:11:49:37:0a:7e:c2:3e:
                    11:af:8d:40:e5:71:9a:b2:7d:ad:47:a0:7d:fd:b0:
                    26:20:55:85:30:23:7b:59:66:31:02:5d:b2:2b:5d:
                    12:16:41:25:83:e4:1f:58:5c:47:b8:d0:66:a7:80:
                    16:27:ad:b6:75:8b:ac:69:bc:27:f5:76:f7:7e:c4:
                    dd:64:9d:88:24:e0:33:47:d8:23:eb:71:eb:e6:4a:
                    ca:d6:5b:85:fd:d1:30:98:ba:84:a0:b2:c2:d2:04:
                    bd:bb:4f:05:e8:25:f3:cc:43:82:a4:a8:f5:8a:28:
                    0a:6a:53:43:62:40:0d:24:2e:36:1f:a8:86:92:85:
                    0d:74:44:21:85:6f:cd:a4:2e:c9:87:d6:50:a2:a1:
                    86:31:04:8f:81:6a:4c:c8:b4:93:ef:28:94:76:d4:
                    b1:fa:be:0a:92:fb:d4:c7:0f:28:8e:de:54:dc:3e:
                    f2:24:ab:fe:58:48:bc:1c:74:b7:24:dd:19:16:a4:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C0:79:C4:AB:7C:BB:47:A7:D1:C0:BD:7B:BF:39:6C:CD:D8:58:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f589231c-6b91-3d5f-a262-e74256c0e6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.216.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cd:55:fa:88:0b:71:6d:62:01:35:f0:b3:10:a4:d2:a0:c3:
         78:2d:e5:9c:19:27:0e:51:dd:59:57:e0:92:de:24:f6:99:b0:
         2c:22:54:03:e6:37:40:a6:71:7c:3b:b3:4e:2a:4a:22:a9:a9:
         e4:3d:9a:4a:5e:10:6d:52:43:d3:3d:92:da:8c:c9:57:2f:6f:
         26:4f:72:f7:48:7e:9e:eb:31:ec:d9:fa:11:2c:ab:6c:52:43:
         a3:2d:5d:5e:49:39:67:56:82:03:01:72:05:d5:b2:ef:76:9f:
         9d:bb:85:81:bf:12:c7:8a:c0:c3:82:8d:8f:a7:b4:c4:8a:ce:
         66:89:97:f8:e9:c1:43:06:ee:24:4b:5e:fb:c7:66:53:bd:4b:
         7d:e2:ac:ac:08:a2:20:43:25:86:69:44:04:b7:5c:1f:5b:2b:
         43:ea:b9:56:9a:2a:a1:60:37:95:32:95:70:a7:46:c6:d0:13:
         69:85:20:88:6c:5a:c0:16:5c:f5:f8:76:66:65:3c:02:ac:53:
         61:64:8a:86:92:b9:2c:ce:42:31:6f:72:76:51:a6:79:47:2e:
         c4:57:71:e1:a9:c1:05:1a:60:15:d3:4c:dc:45:8a:7d:15:87:
         4e:e3:08:f8:f4:d5:b2:11:44:1c:51:22:a7:cb:cb:1a:30:52:
         81:8a:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:15:48 2026 by rpki-client